PIN messages are by default not encrypted. In more recent BES versions you could generate organization keys for the devices you manage and then by policy force encryption but that would only work for devices with the key that you manage. -Pk